Created attachment 337228 [details] epatch ready patch to rectify the problem user@host ~ $ sudo -g logcheck /usr/sbin/logcheck -d -o D: [1359462949] Turning debug mode on D: [1359462949] Sourcing - /etc/logcheck/logcheck.conf D: [1359462949] Setting MAILOUT to 1 D: [1359462949] Finished getopts c:dhH:l:L:m:opr:RsS:tTuvw D: [1359462950] Trying to get lockfile: /var/lock/logcheck/logcheck.lock D: [1359462950] Running lockfile-touch /var/lock/logcheck/logcheck.lock D: [1359462950] cleanrules: /etc/logcheck/cracking.d/kernel [...] D: [1359462951] cleanrules: /etc/logcheck/ignore.d.paranoid/usb D: [1359462951] logoutput called with file: /var/log/syslog D: [1359462951] Running /usr/sbin/logtail2 on /var/log/syslog D: [1359462951] /usr/sbin/logtail2 -f "/var/log/syslog" -o "/var/lib/logcheck/offset.var.log.syslog" D: [1359462952] error: Killing lockfile-touch - 12599 D: [1359462952] Error: Could not run logtail or save output Error: Could not run logtail or save output. D: [1359462952] cleanup: Removing - /tmp/logcheck.Q4ep5g I believe the reason for this is this commit: http://anonscm.debian.org/gitweb/?p=logcheck/logcheck.git;a=commitdiff;h=589cf7c64eebec3016fdf2f3aee0b56c8b52edd9 It fixes an issue where logtail2 is not parsing the parameters correctly if there is a double space.
Here's a fix with ebuild: https://github.com/Miriup/dirks-overlay/tree/before-efreet/app-admin/logcheck
Please report this upstream.
